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Abstract. We consider the use of cost sharing in the Aspnes model Q] 
of network inoculation, showing that this can improve the cost of the 
optimal equilibrium by a factor of 0(^/n) in a network of n nodes. 

1 Introduction 

A game-theoretic model of inoculation against viral infection was introduced by 
Aspnes ct al. jTj. Each player in this game is a node in an undirected connected 
graph Q with n nodes. Nodes represent network hosts that might become in- 
fected, while edges represent direct communication links through which a virus 
might spread. Each node has two possible pure strategies: either do nothing, or 
inoculate itself (i.e. install anti- viral protection). After the nodes have made their 
choices, an attacker selects one node uniformly at random to infect. Infection 
then propagates through the graph; a non-inoculated node becomes infected if 
any of its neighbors are infected. 

Let / be the set of inoculated nodes. These nodes are in effect removed from 
the graph, leaving a (possibly disconnected) graph of vulnerable nodes Qi. Let v 
be the initial node selected by the attacker. If v € I, then v is not infected and 
thus no nodes become infected. Otherwise, the infected nodes are precisely the 
nodes in the connected component containing v. Given any node u, the connected 
component containing u is denoted k u , and the size of this component is denoted 
k u (with k u = if u is inoculated). Henceforth "component" will always mean 
a connected component of Qj. 

Let C be the cost of inoculation, and L be the loss suffered by an infected 
node. Thus if u € I , the cost borne by u is just C: otherwise u's cost is £ „ , 
because ^ is the probability of component k u receiving the initial infection. 
Given these costs, the threshold size for a component is t = n^. The set / gives 
a Nash equilibrium if and only if both of these conditions hold: 

— each component of Qi has size at most t 

— de-inoculating any node j € I (i.e. putting j and all its adjacent edges back 
in the graph) creates a component of size at least t 
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In other words, if a component is larger than t, then each node in that component 
would be better off paying the cost C to inoculate; if an inoculated node could 
rejoin the graph and still be in a component smaller than t, it would be better 
off not paying the cost of inoculation. 

The social cost of / is the sum of individual costs. This sum can be written 

as 

cUI + ££*? (i) 



2 Cost Sharing 

A crucial feature of the Aspnes model is that one node can benefit from another 
node's decision to inoculate. This motivates consideration of a model in which 
one node might pay part of the cost of another node's inoculation. Such cost- 
sharing models of network games have been studied by many authors (see [2] and 
references therein), but this idea has not, so far as we are aware, been applied to 
the Aspnes model previously. We have the same graph as in the original game, 
but now a pure strategy for node i is a vector a 1 = (a\ . . .a l n ), where a*- is 
the contribution made by node i to the inoculation of node j. Node j will be 
inoculated if and only if 

E «5 > c ■ 

l<i<n 

The individual cost for node i is 

^ 3 n 

l<j<n 

We have the following necessary conditions for equilibria in this game. 

Theorem 1. Let a = (a 1 , a 2 , . . .a n ) be a pure- strategy equilibrium in the cost- 
sharing Aspnes game. Then 

1. J2j a ) — C f or a M nodes i 

2. ^ i a l j is either or C for all nodes j 

3. Each ki <n^ 

4- If j is inoculated but de-inoculating j would not increase the size of Ki, then 
aj=0 

Also, the cost-sharing game and the original game have the same minimum social 
cost. 

Proof. Any node i violating (flj could reduce its cost by inoculating itself (i.e. 
setting a\ — C) and paying nothing for any other node. If ^ docs not hold 
for some j, then any node i with a* ^ could reduce its cost by reducing 
its contribution to j without changing j's inoculation status. If <|3j> docs not 
hold then any node in Ki could reduce its cost by inoculating itself. Any node i 



violating (QJ could reduce its cost by setting a* = 0, since this would not increase 
i's probability of infection; we call this condition locality. Note in particular 
this implies that, if i is inoculated, then i does not contribute to the cost of 
inoculating any node other than (perhaps) itself. 

Since the cost-sharing game has a strictly larger set of strategies, its minimum 
social cost can be no greater. On the other hand, let a = (a 1 , a 2 , . . . a") be a 
strategy vector minimizing social cost in the cost-sharing game (note a need not 
be an equilibrium), and let / be the resulting set of inoculated nodes. Since cost 
is minimized, the total amount spent on inoculations is exactly C\I\. Thus we 
can obtain the same social cost in the original game by inoculating all the nodes 
in / and no others. □ 

Although cost-sharing cannot improve the social optimum, it can create bet- 
ter equilibria. Consider a graph Q with a cost-sharing equilibrium that inoculates 
a set of vertices /, and let u £ I. Suppose there arc k components ri, . . . of 
Qi which arc adjacent to u, with sizes t±, . . . tfc. Let t = U and let tj = t — tj. 
Since de- inoculating u would create a component of size t + 1, the contribution 
of u to its own inoculation can be no greater than — (t + 1). Because of locality, 
only nodes from (J^t, can contribute to inoculating u; therefore there must be 
some node in some Tj whose contribution is at least 

C-L(t + l)/n _ C Lt + 1 
t t n t 

However, since we are at equilibrium, this contribution must also be no greater 
than — (tj + 1). Combining these inequalities yields 

nC 

— < t(tj + 2) + 1 . 
This gives a lower bound on t: 

Theorem 2. Let Q be a graph on n nodes and let I be a set of inoculated nodes 
which is obtained at an equilibrium of the cost-sharing Aspnes game with inocu- 
lation cost C and infection cost L. Then any component created by de-inoculating 
u £ / must have size at least 




Recall that without cost sharing, any component created by de-inoculating 
a node must have size at least j^n. We now show that with cost sharing, the 
bound ([2]) can be attained, and this can lead to a 0(\/n) improvement in the 
cost of the best equilibrium. 

Theorem 3. There exists a family of graphs on which cost-sharing improves the 
best Aspnes equilibrium by a factor ofO(y/n). 

Proof. Let Q n be a cycle on n vertices. We normalize to C = 1 and let n approach 
infinity with L fixed and L > C . 



We first show that, even allowing mixed strategies, the social cost of an 
equilibrium of the original Aspnes game on Q n must be 0(n). This expected 
social cost is 

^{^ + (1-^)^} (3) 

i 

where Oj is the probability that node i inoculates and Si is the expected size 
of i's component if i does not inoculate. At equilibrium, we have Si > ^ when 
di = 1, Si < ji when = 0, and Si = J otherwise [1]. A node i is called 
nonbinary if is not zero or one. Note that if a nonbinary node i is adjacent 
to node i + 1 with a^+i = then we must have Si = Sj+i = since the two 
nodes must be in the same component if i does not inoculate. Similarly, if two 
adjacent nodes have at = a,i + i = then Si = Si+i. 

Now consider a node j with a,j = 1. If there are no such nodes (or only one 
such node), then the observations we have just made imply Si = x for all i (or 
all i 7^ j), giving an expected social cost of 0(n). Otherwise consider the nodes 
j + 1 and j — 1 adjacent to j. Note that 

Sj ■ = 1 + exp(kj-i) + exp(%_|_i) 

since if j docs not inoculate it merges the components Kj-i and Kj+i . But clearly 
St > exp(fc t ) for any node t; and since equilibrium requires Sj > £ we must have 

Sj-i + Sj+i > — - 1 . 

So suppose without loss of generality that S^+i > ■ But this implies we 
have at least consecutive nodes j + 1, j + 2, . . . j + with probability 
of inoculation less than 1: otherwise S^+i could not be this large. Their total 
contribution to the social cost is 0(n), since each such node j + 1 < t < 
j + n=£ hasS t = S j+1 . 

However, with \fnL inoculated nodes evenly spaced around the cycle, break- 
ing Q n into components of size y/ n/L — 1, we would have a social cost of 

VnL + — VnL— = 2VnL . (4) 
n L 

This set of inoculated nodes (and thus this social cost) can be attained at a 
pure-strategy equilibrium in the cost-sharing game. If each node shares equally 
in the cost of protecting the nearest inoculated node, its cost is 



1 , £ V^-l _o./£ L 



n n 



By not making any contribution to the cost of inoculation, a node would create 
a component of size — 1, incurring a cost of 



L 2yfn/L-l _ [L L 



n n 



It is easy to see (using the same reasoning as in theorem [T]) that no other change 
in a node's strategy could produce a better result. 

Note that the fragility of this equilibrium can be removed (while maintaining 
a ratio of 0(y/n)) by inoculating (1 — e)VnL evenly-spaced nodes; then a node's 
cost will strictly increase if it does not contribute to inoculation. Finally, it is 
easy to see that (@| is is in fact the social optimum; given the size of /, we 
minimize kf by distributing the inoculated nodes evenly, so ([!]) becomes 



which is minimized at |/| = \/ Ln. Thus the price of stability (defined as the 
ratio of the social optimum to the best equilibrium) is 1. 
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